Date
March 19, 2025, 10:35 a.m.
| Environment | |
|---|---|
| qemu-arm64 | |
| qemu-x86_64 |
[ 282.695757] ================================================================== [ 282.695848] BUG: KASAN: global-out-of-bounds in cs_dsp_mock_bin_add_name_or_info.isra.0+0x19c/0x348 [ 282.695960] Read of size 12 at addr ffffaabf7d176120 by task kunit_try_catch/3334 [ 282.696022] [ 282.696104] CPU: 1 UID: 0 PID: 3334 Comm: kunit_try_catch Tainted: G B D W N 6.14.0-rc7-next-20250319 #1 PREEMPT [ 282.696221] Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN, [N]=TEST [ 282.696261] Hardware name: linux,dummy-virt (DT) [ 282.696311] Call trace: [ 282.696358] show_stack+0x20/0x38 (C) [ 282.696538] dump_stack_lvl+0x8c/0xd0 [ 282.696685] print_report+0x2fc/0x5f0 [ 282.696813] kasan_report+0xc8/0x118 [ 282.696890] kasan_check_range+0x100/0x1a8 [ 282.696963] __asan_memcpy+0x3c/0x98 [ 282.697036] cs_dsp_mock_bin_add_name_or_info.isra.0+0x19c/0x348 [ 282.697135] cs_dsp_mock_bin_add_info+0x18/0x30 [ 282.697206] bin_patch_name_and_info+0x164/0x6b0 [ 282.697278] kunit_try_run_case+0x14c/0x3d0 [ 282.697357] kunit_generic_run_threadfn_adapter+0x88/0x100 [ 282.697438] kthread+0x318/0x618 [ 282.697514] ret_from_fork+0x10/0x20 [ 282.697594] [ 282.697628] The buggy address belongs to the variable: [ 282.697665] __loc.0+0x2c0/0x3a0 [ 282.697733] [ 282.697779] The buggy address belongs to the virtual mapping at [ 282.697779] [ffffaabf7be30000, ffffaabf7dba0000) created by: [ 282.697779] paging_init+0x618/0x7c8 [ 282.697860] [ 282.697957] The buggy address belongs to the physical page: [ 282.698002] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44f76 [ 282.698108] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 282.698207] raw: 03fffe0000002000 ffffc1ffc013dd88 ffffc1ffc013dd88 0000000000000000 [ 282.698271] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 282.698318] page dumped because: kasan: bad access detected [ 282.698358] [ 282.698390] Memory state around the buggy address: [ 282.698439] ffffaabf7d176000: f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 00 00 06 f9 [ 282.698489] ffffaabf7d176080: f9 f9 f9 f9 02 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 [ 282.698539] >ffffaabf7d176100: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 282.698581] ^ [ 282.698627] ffffaabf7d176180: 00 07 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 282.698680] ffffaabf7d176200: 00 00 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 282.698723] ==================================================================
[ 167.649376] ================================================================== [ 167.649737] BUG: KASAN: global-out-of-bounds in cs_dsp_mock_bin_add_name_or_info.isra.0+0x194/0x338 [ 167.649900] Read of size 12 at addr ffffa473df66fda0 by task kunit_try_catch/3099 [ 167.649974] [ 167.650131] CPU: 0 UID: 0 PID: 3099 Comm: kunit_try_catch Tainted: G D W N 6.14.0-rc7-next-20250319 #1 PREEMPT [ 167.650304] Tainted: [D]=DIE, [W]=WARN, [N]=TEST [ 167.650396] Hardware name: linux,dummy-virt (DT) [ 167.650482] Call trace: [ 167.650521] show_stack+0x18/0x24 (C) [ 167.650597] dump_stack_lvl+0x74/0x8c [ 167.650675] print_report+0x300/0x5f4 [ 167.650749] kasan_report+0xc4/0x108 [ 167.650817] kasan_check_range+0x100/0x1a8 [ 167.650880] __asan_memcpy+0x3c/0x94 [ 167.650951] cs_dsp_mock_bin_add_name_or_info.isra.0+0x194/0x338 [ 167.651019] cs_dsp_mock_bin_add_info+0x10/0x1c [ 167.651086] bin_patch_name_and_info+0x15c/0x6a0 [ 167.651153] kunit_try_run_case+0x144/0x3bc [ 167.651223] kunit_generic_run_threadfn_adapter+0x80/0xec [ 167.651292] kthread+0x37c/0x67c [ 167.651358] ret_from_fork+0x10/0x20 [ 167.651462] [ 167.651539] The buggy address belongs to the variable: [ 167.651577] __loc.0+0x2c0/0x3a0 [ 167.651649] [ 167.651763] The buggy address belongs to the virtual mapping at [ 167.651763] [ffffa473de560000, ffffa473dfe70000) created by: [ 167.651763] paging_init+0x4d4/0x640 [ 167.651850] [ 167.651940] The buggy address belongs to the physical page: [ 167.652390] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4426f [ 167.652567] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 167.653121] raw: 03fffe0000002000 ffffc1ffc0109bc8 ffffc1ffc0109bc8 0000000000000000 [ 167.653193] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 167.653335] page dumped because: kasan: bad access detected [ 167.653390] [ 167.653450] Memory state around the buggy address: [ 167.653781] ffffa473df66fc80: f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 00 00 06 f9 [ 167.653878] ffffa473df66fd00: f9 f9 f9 f9 02 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 [ 167.653945] >ffffa473df66fd80: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 167.654007] ^ [ 167.654145] ffffa473df66fe00: 00 07 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 [ 167.654221] ffffa473df66fe80: 00 00 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 167.654329] ==================================================================
[ 191.764412] ================================================================== [ 191.764798] BUG: KASAN: global-out-of-bounds in cs_dsp_mock_bin_add_name_or_info.isra.1+0x198/0x33c [ 191.764949] Read of size 12 at addr ffffa9c7986fdba0 by task kunit_try_catch/3098 [ 191.765026] [ 191.765128] CPU: 1 UID: 0 PID: 3098 Comm: kunit_try_catch Tainted: G D W N 6.14.0-rc7-next-20250319 #1 PREEMPT [ 191.765241] Tainted: [D]=DIE, [W]=WARN, [N]=TEST [ 191.765284] Hardware name: linux,dummy-virt (DT) [ 191.765333] Call trace: [ 191.765394] show_stack+0x18/0x24 (C) [ 191.765484] dump_stack_lvl+0x78/0x90 [ 191.765563] print_report+0x1d4/0x5dc [ 191.765644] kasan_report+0x78/0xc0 [ 191.765718] kasan_check_range+0x180/0x210 [ 191.765794] memcpy+0x3c/0xa4 [ 191.765869] cs_dsp_mock_bin_add_name_or_info.isra.1+0x198/0x33c [ 191.765949] cs_dsp_mock_bin_add_info+0x10/0x1c [ 191.766104] bin_patch_name_and_info+0x164/0x6a8 [ 191.766232] kunit_try_run_case+0x144/0x3c0 [ 191.766348] kunit_generic_run_threadfn_adapter+0x80/0xec [ 191.766454] kthread+0x3f0/0x780 [ 191.766534] ret_from_fork+0x10/0x20 [ 191.766630] [ 191.766711] The buggy address belongs to the variable: [ 191.766753] __loc.44567+0x280/0x420 [ 191.766827] [ 191.766988] The buggy address belongs to the virtual mapping at [ 191.766988] [ffffa9c7975e0000, ffffa9c798f00000) created by: [ 191.766988] paging_init+0x474/0x61c [ 191.767078] [ 191.767175] The buggy address belongs to the physical page: [ 191.767448] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x442fd [ 191.767601] flags: 0x3fffe0000002000(reserved|node=0|zone=0|lastcpupid=0x1ffff) [ 191.768060] raw: 03fffe0000002000 ffffc1ffc010bf48 ffffc1ffc010bf48 0000000000000000 [ 191.768143] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 191.768295] page dumped because: kasan: bad access detected [ 191.768357] [ 191.768421] Memory state around the buggy address: [ 191.768762] ffffa9c7986fda80: f9 f9 f9 f9 03 f9 f9 f9 f9 f9 f9 f9 00 00 06 f9 [ 191.768854] ffffa9c7986fdb00: f9 f9 f9 f9 02 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 [ 191.768925] >ffffa9c7986fdb80: f9 f9 f9 f9 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 191.768990] ^ [ 191.769098] ffffa9c7986fdc00: 00 07 f9 f9 f9 f9 f9 f9 00 06 f9 f9 f9 f9 f9 f9 [ 191.769149] ffffa9c7986fdc80: 05 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 f9 f9 f9 f9 [ 191.769230] ==================================================================
[ 238.035868] ================================================================== [ 238.037116] BUG: KASAN: global-out-of-bounds in cs_dsp_mock_bin_add_name_or_info.isra.0+0x1c1/0x3d0 [ 238.037785] Read of size 12 at addr ffffffffb472a500 by task kunit_try_catch/4195 [ 238.038339] [ 238.038624] CPU: 0 UID: 0 PID: 4195 Comm: kunit_try_catch Tainted: G B D W N 6.14.0-rc7-next-20250319 #1 PREEMPT(voluntary) [ 238.038809] Tainted: [B]=BAD_PAGE, [D]=DIE, [W]=WARN, [N]=TEST [ 238.038850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 238.038918] Call Trace: [ 238.038955] <TASK> [ 238.039004] dump_stack_lvl+0x73/0xb0 [ 238.039089] print_report+0xd1/0x660 [ 238.039163] ? __virt_addr_valid+0x1db/0x2d0 [ 238.039282] ? kasan_addr_to_slab+0x11/0xa0 [ 238.039347] kasan_report+0x104/0x140 [ 238.039389] ? cs_dsp_mock_bin_add_name_or_info.isra.0+0x1c1/0x3d0 [ 238.039460] ? cs_dsp_mock_bin_add_name_or_info.isra.0+0x1c1/0x3d0 [ 238.039980] kasan_check_range+0x10c/0x1c0 [ 238.040073] __asan_memcpy+0x27/0x70 [ 238.040372] cs_dsp_mock_bin_add_name_or_info.isra.0+0x1c1/0x3d0 [ 238.040490] ? __pfx_cs_dsp_mock_bin_add_name_or_info.isra.0+0x10/0x10 [ 238.040565] ? __pfx_cs_dsp_mock_reg_addr_inc_per_unpacked_word+0x10/0x10 [ 238.040630] ? __pfx__cs_dsp_remove_wrapper+0x10/0x10 [ 238.040723] cs_dsp_mock_bin_add_info+0x12/0x20 [ 238.040763] bin_patch_name_and_info+0x1a1/0x8d0 [ 238.040799] ? __pfx_bin_patch_name_and_info+0x10/0x10 [ 238.040834] ? __pfx_kfree_action_wrapper+0x10/0x10 [ 238.040872] ? kunit_add_action_or_reset+0x1d/0x40 [ 238.040927] ? __pfx_read_tsc+0x10/0x10 [ 238.040960] ? ktime_get_ts64+0x86/0x240 [ 238.040999] kunit_try_run_case+0x1b2/0x490 [ 238.041032] ? __pfx_kunit_try_run_case+0x10/0x10 [ 238.041062] ? _raw_spin_lock_irqsave+0xa1/0x100 [ 238.041092] ? _raw_spin_unlock_irqrestore+0x5f/0x90 [ 238.041122] ? __kthread_parkme+0x82/0x160 [ 238.041152] ? preempt_count_sub+0x50/0x80 [ 238.041189] ? __pfx_kunit_try_run_case+0x10/0x10 [ 238.041220] kunit_generic_run_threadfn_adapter+0x85/0xf0 [ 238.041250] ? __pfx_kunit_generic_run_threadfn_adapter+0x10/0x10 [ 238.041279] kthread+0x323/0x710 [ 238.041308] ? trace_preempt_on+0x20/0xc0 [ 238.041344] ? __pfx_kthread+0x10/0x10 [ 238.041374] ? _raw_spin_unlock_irq+0x47/0x80 [ 238.041402] ? calculate_sigpending+0x7b/0xa0 [ 238.041433] ? __pfx_kthread+0x10/0x10 [ 238.041464] ret_from_fork+0x41/0x80 [ 238.041535] ? __pfx_kthread+0x10/0x10 [ 238.041568] ret_from_fork_asm+0x1a/0x30 [ 238.041619] </TASK> [ 238.041637] [ 238.059786] The buggy address belongs to the variable: [ 238.060098] __loc.16+0x80/0x540 [ 238.060487] [ 238.060710] The buggy address belongs to the physical page: [ 238.061293] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3952a [ 238.062047] flags: 0x100000000002000(reserved|node=0|zone=1) [ 238.062658] raw: 0100000000002000 ffffea0000e54a88 ffffea0000e54a88 0000000000000000 [ 238.063311] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 238.063975] page dumped because: kasan: bad access detected [ 238.064385] [ 238.064671] Memory state around the buggy address: [ 238.065154] ffffffffb472a400: 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 [ 238.065574] ffffffffb472a480: 00 00 f9 f9 f9 f9 f9 f9 00 01 f9 f9 f9 f9 f9 f9 [ 238.065995] >ffffffffb472a500: 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00 00 07 f9 f9 [ 238.066733] ^ [ 238.067173] ffffffffb472a580: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 06 f9 f9 [ 238.067968] ffffffffb472a600: f9 f9 f9 f9 05 f9 f9 f9 f9 f9 f9 f9 00 01 f9 f9 [ 238.068657] ==================================================================